Player Verification Risks Rise Across Remote Gambling

How Verification Checks Are Being Bypassed

Player verification remains the first control against fraud, mule accounts and underage access. In 2026, the UK Gambling Commission, UKGC, and the Financial Action Task Force, FATF, outlined how that control is being defeated more often and with greater sophistication.

UKGC reported a rise in attempts to bypass remote onboarding checks through forged documents, deepfake video and AI-driven face substitution. The regulator added weak remote player verification to its risk register for the first time and assigned it the highest score, 9 out of 9.

Low-Tech Evasion Still Matters

Not every workaround relies on advanced tools. In a UK survey of 1,270 children aged 9 to 16, 32% said they had bypassed age restrictions at least once in the previous two months. The most common method was entering a false date of birth, cited by 13%.

One case shared in the wider discussion involved a 12-year-old boy who drew a moustache with an eyebrow pencil, and an age estimation system judged him to be 15. The survey covered online services generally, not gambling sites in isolation, yet the lesson for gaming operators is clear: weak age checks fail in simple, repeatable ways.

Mule Accounts and Repeat Registration

UKGC also pointed to drop accounts, accounts used to move money for other people, as a growing risk. These profiles can pass initial checks yet still serve criminal activity once they are active.

One example in the regulator's reporting involved a player whose account was blocked on money laundering concerns, but who later passed registration checks again and opened a new account. That exposes a core weakness in one-off onboarding models: if identity checks stop at sign-up, known risk can return through a fresh profile.

FATF flags another warning sign when the account holder's name does not match the payment details. For operators, that mismatch is more than an admin issue. It can indicate third-party funding, mule behaviour, or attempts to distance the source of funds from the player account.

Why Post-Registration Monitoring Is Critical

Anti-money laundering rules require operators to know both who the player is and where their money comes from. Several of the methods highlighted by FATF appear only after an account has already been approved, which makes ongoing monitoring essential.

One method is payment structuring. A larger sum is split into smaller transactions to stay below the threshold that may trigger extra checks. Another red flag is large deposits followed by withdrawals with little or no betting activity, which can make funds appear to have come from the operator rather than the original source.

UKGC also highlighted prepaid cards. These can be loaded with cash, making the source of funds harder to trace. In one case, a player drew scrutiny after depositing large sums from a prepaid card while placing very few bets.

What This Means for the Market

The direction of travel is clear. Verification is moving from a single registration checkpoint to a continuous risk process. Suppliers are combining document checks, facial matching and ongoing account assessment in one workflow, so operators can review player risk after sign-up as well as at entry.

That shift matters commercially as much as it does for compliance. Better verification can reduce fraud losses, improve audit readiness and protect legitimate players from account abuse. For B2B providers, the opportunity now sits in tools that connect identity, payments and behavioural monitoring without adding unnecessary friction for genuine users.

Source: iGR Telegram

🌐 Source: iGR Telegram